Hoch
CVE-2013-1842
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.647
Mittel
CVE-2013-1843
TYPO3 Open redirect vulnerability in the Access tracking mechanism
Mittel
CVE-2013-1814
Apache Rave information disclosure vulnerability
Mittel
CVE-2013-4729
phpMyAdmin Global variables scope injection vulnerability
Mittel
CVE-2013-3300
Lift Sensitive Information Disclosure
Hoch
CVE-2012-4399
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
Mittel
CVE-2013-4997
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Niedrig
CVE-2013-4600
Alkacon OpenCMS XSS via title and requestedResource parameters
Hoch
CVE-2010-3313
EGroupware Code Injection vulnerability
Mittel
CVE-2013-4766
Eucalyptus Unauthorized Access to CC/NC Log Files
Hoch
CVE-2013-1630
pyshop before 0.7.1 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary co
Kritisch
CVE-2013-5942
Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to (1) remote_storage.py, (2) sto
Kritisch
CVE-2013-5093
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a c
Mittel
CVE-2013-4378
Improper Neutralization of Input During Web Page Generation in JavaMelody
Mittel
CVE-2011-1411
Improper Authentication in OpenSAML
Hoch
CVE-2013-1633
easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to ex
Hoch
CVE-2013-4682
Multishop extension for TYPO3 has SQL Injection vulnerability
Mittel
CVE-2013-5750
FriendsOfSymfony FOSUserBundle denial of service via login form
Mittel
CVE-2011-2731
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
Mittel
CVE-2013-4295
Apache Shindig PHP Sensitive Information Disclosure
Mittel
CVE-2013-4390
Apache Sling Auth Core bundle vulnerable to Open Redirection
Hoch
CVE-2013-1445
The Crypto.Random.atfork function in PyCrypto before 2.6.1 does not properly reseed the pseudo-random number generator (PRNG) before allowing a child process to access it, which makes it easier for co
Mittel
CVE-2011-5036
Rack Gem Subject to Denial of Service via Hash Collisions
Mittel
CVE-2013-6289
Apache Solr for TYPO3 (solr) extension is vulnerable to Cross-site scripting (XSS)
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.